implementing proper user authentication and authorization for plugins run on server side